TATE-SHAFAREVICH GROUPS AND K3 SURFACES 

PATRICK CORN 

Abstract. This paper explores a topic taken up recently by Logan and van Luijk in [H]- 
f^^ , finding nontrivial 2-torsion elements of the Tate-Shafarevich group of the Jacobian of a 

f^ ' genus-2 curve by exhibiting Brauer-Manin obstructions to rational points on certain quo- 

^D I tients of principal homogeneous spaces of the Jacobian, whose desingularizations are explicit 

K3 surfaces. The main difference between the methods used in this paper and those of Lo- 
^ I gan and van Luijk is that the obstructions are obtained here from explicitly constructed 

, O ■ quaternion algebras, rather than elliptic fibrations. 
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1. Introduction 

h' 

17- ■ Let C be a curve of genus 2 over a number field fc, with Jacobian J. In an effort to describe 

the (finite) set C{k), we are led to the study of J{k). To determine its rank, we refer to a 
well-known exact sequence 






> 



o 



(1) -^ J{k)/2J{k) -^ Sel(2)(A;, J) ^ m(A;, J)[2] -^ 



where the middle group is effectively computable. See [T7] for a comprehensive description 
of the computation, which has been implemented in the computer algebra system MAGMA 

<o : (i2j). 

^ ' So computing the group on the left is more or less equivalent to computing the rather 

Tjj- ■ mysterious group on the right. In this paper, we find examples of curves C over Q such 

that in(Q, J) [2] is nonzero, by finding explicit elements of this group. Such elements can 

be represented by 2-coverings A of J which have points everywhere locally but no fc-points. 

The strategy, as in ^2], is to prove that the Hasse principle fails for X by exhibiting a 

Brauer-Manin obstruction to rational points on the desingularization of the quotient A/i, 

where t is the involution corresponding to multiplication by —1. This desingularization is a 

/\ \ K3 surface which can be given explicitly as the smooth complete intersection of 3 quadrics 

c^ ■ in P^ 

The result is the following theorem. 

Theorem 1.1. Let S he the set of primes splitting completely in a certain finite extension 
K/Q (this extension is given explicitly in the statement of Proposition ^^) . For all n equal 
to the product of primes in S, the genus-2 curve 

C„: 2/2 = n{x^ -5x + l){x^ - 7x + I0){x + 1) 

satisfies Ul{Q,Jac{C))[2] ^ 0. 

The curve with n = 1 was originally obtained by a computer search over products of 
polynomials of degree 2, 3, 1 with small coefficients. 
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2. The Brauer-Manin obstruction 

2.1. Generalities. First we briefly review the Brauer-Manin obstruction to the Hasse princi- 
ple. Let V be a smooth proper /c-variety, k a number field. Then the map V{Ak) — > Ylv ^i^v) 
is a bijection (tl6j, pp. 98-99). We will suppose that this set V{Ak) is nonempty. 

For any scheme V we can define the Brauer group BrV = if^(V^t, *&„). For an element 
^ G Br V^, define the set 

\/(Afc)-^ = {(P.) G V{Kk) : J]inv, A{P.,) = 0}, 



^k)^. 



where the sum is over all places f of fc, and define 

(2) V{kkf'= fl V{k, 

A&BvV 

Here inv^ : Br /c^, -^ Q/Z is an isomorphism if v is nonarchimedian, or the injection 
|Z/Z — i> Q/Z if ky = M, or the zero map if k^ = C Class field theory shows that 

Vik) C V(A,)^'- C V(A,), 

so we say that V has a Brauer-Manin obstruction to the Hasse principle if V{Ak)^^ is empty, 
so that V{k) is as well. 

For many classes of varieties, it is believed that the Brauer-Manin obstruction to the Hasse 
principle is "the only one"; that is, if V{Ak)^^ is nonempty, then so is V{k). It is not known 
(even conjecturally) whether or not the Brauer-Manin obstruction to the Hasse principle is 
the only one for K3 surfaces. 

2.2. The key isomorphism. The map V — > Spec fc induces a map Brfc — ;> Brl^, which 
is injective if V{Ak) is nonempty. Elements in the image of this map are called constant 
algebras. Two elements of Br V which differ by a constant algebra cut out the same subset 
of V{Ak), so the intersection ([2]) defining V{Ak)^'^ need only be taken over a set of represen- 

,BtV 
tatives of ^ , . 
Br A; 

Proposition 2.1. For V a smooth projective geometrically integral k-variety, k a number 
field, with V{Ak) 7^ 0, there is an isomorphism 

(3) ^^H\k,PicV) 

where V = V x^k and Bri y = ker(BrV^ — * BrV^) is the "algebraic part" of the Brauer 
group. 

Proof: This is a standard consequence of the Hochschild-Serre spectral sequence; see for 
instance |8j. Proposition 1.3.7. D 

It is, unfortunately, very difficult in general to compute the inverse of the isomorphism 
([3]) explicitly. The crux of the computation is an explicit use of the fact (due to Tate) 



that H^{k,k ) = 0; that is, one must express an arbitrary 3-cocycle with values in A; as a 
coboundary. In the next section, we discuss one way around this problem. 

2.3. Quaternion algebras in Bri(V^). One common way of constructing explicit elements 
of Bti{V) is as follows: 

Definition 2.2. For c & k* and g G k{V)*, the quaternion algebra (c, g) is a four- dimensional 
central simple k(y)-aAgehYa with A;(K)-basis 1, i,j, ij, satisfying P = c, j^ = g, and ij = —ji. 

Of course, quaternion algebras are quite general objects; the reason we study the special 
quaternion algebras defined above is the following standard lemma: 

Lemma 2.3. For c E k* and g G kiV)* , a quaternion algebra {c,g) G Bt k{V) is in the 
image of the map BtV ^ Bt k{V) if and only if div{g) = D + aD, where D is a divisor 
defined over k{\/c) and a is the nontrivial element of Ga\{k{^) / k) . It is a constant algebra 
if and only if div{g) = D' + aD' , where D' is a principal divisor defined over k{y/c). 

Proof: See |8j. Proposition 2.2.3 or [3], Proposition 4.17. D 

Note that the quaternion algebra (c, g) will always split over the quadratic extension 
k{^/c), so its image in H^{k, PicV) will restrict to in H^{k{y^),PicV). There is also a 
well-known formula for the local invariant of such a quaternion algebra in Br\^: for any 
point Py G V{ky), we have that 

inv ^ {c, g){P^) = [c,g{P^)]^, 

where [a, b]^ is the Hilbert symbol of a, 6 G fc* expressed as an element of -Z/Z. So [a, b]^ = 
if and only if x^ — ay"^ — bz^ represents in fc^; otherwise it equals 1/2. 

Algorithm 2.4. Given a class of varieties over /c, here is how we look for varieties V in that 
class with quaternion algebras of the above type generating nonconstant elements in Bri(l^): 

(1) Find a Gjt-invariant generating set P for PicV^ (possibly a subgroup of PicV will 
work as well; see the comments). 

(2) The action of the Galois group on P induces a map Gk — > Aut(P). By inflation- 
restriction, H^{k,VicV) will be isomorphic to H^{H, BicV), where H is the image 
of Gk inside Aut(P). List the cohomology groups H^{H,'PicV) for every subgroup 
H of Aut(P); these are the possibilities for H^{k, Pic V). 

(3) Search the subgroups of Aut(P) to find H such that H^{H, PicV) = Z/2 but 
H^{H', Pic V) = for some subgroup if C if of index 2. 

(4) Give conditions on V such that the image of Gk in Aut(P) equals H. 

(5) Let L be the fixed field of H'. Use the equality H^{H, Pic V) = Z/2 to find a nonzero 
divisor class d G Pic Vl such that d + ad = in Pic Vl, a the nontrivial element of 
Ga\{L/k). 

(6) Given d and L, find a divisor D defined over L whose class is d. (Such a divisor is 
guaranteed to exist whenever V has points everywhere locally: see [8], Proposition 
1.3.4.) Then our quaternion algebra is {c,g), where L = k{^) and g is a. function 
whose divisor is D + aD. 

Comments on the algorithm: Carrying out step (1) requires that we know quite a lot about 
the geometry of V . Even for general K3 surfaces, this is too hard. Some previous attempts 
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to carry out this algorithm exphcitly have restricted themselves to Del Pezzo surfaces (e.g. 
[8], [To], [9]), or special K3 surfaces such as diagonal quartic hypersurfaces ([3]) or Kummer 
surfaces {\i\)- As we will see, the K3 surfaces we examine in this paper come equipped with 
a Gfc-invariant set F of 32 lines generating a subgroup of Picl^ which is free of rank 17. 

In Step (3), we usually search for a subgroup H maximal with respect to the given proper- 
ties, so that we can study the broadest possible class of varieties V admitting a nonconstant 
quaternion algebra of the above type in Bri V. 

We carry out Step (5) using the following procedure: let P = PicV". Then there is an 
isomorphism 

sending (the class of) a divisor class e on the left to the cocycle c^ = ^(re — e) (cf. [9], 
Lemma 3.1). Since we have computed H^{k, P)[2], we can find a nontrivial c^ and hence a 
nontrivial e. If this cocycle trivializes upon restriction to Gl, then we can find a e on the 
left defined over L, and then the divisor class d = |(o"e — e) satisfies d + ad = in Pic Vl- 

Moreover, in this case the class in Bri(l^)/Brfc of the quaternion algebra {c,g) we obtain 
at the end of the algorithm corresponds via the isomorphism [3] to the class of the cocycle Cr, 
so if we know that this cocycle is not a coboundary, we are guaranteed that the quaternion 
algebra we have found is nonconstant. 

In practice, we usually write down conditions on V in Step (4) in such a way that gener- 
ically H^{k,P)[2] is nontrivial, because the image of Gk -^ Aut(r) is the subgroup H we 
found in Step (3); but if the image of Gk -^ Aut(r) is strictly contained in H, it might 
happen that the quaternion algebra {c,g) we construct is constant. 

Similarly, if P generates a subgroup Q of P, this algorithm constructs a quaternion algebra 
whose corresponding cocycle in H^{k, Q) is not a coboundary. If Q is a proper subgroup of 
P, the restriction of this quaternion algebra to H^{k, P) might be zero. So in this case (and 
the problem case in the above paragraph), we will get a bona fide element of Br V from the 
above algorithm, but it will not furnish a Brauer-Manin obstruction to rational points on V. 

3. Genus-2 curves and K3 surfaces: a review of the theory 
The material in this section is taken largely from 



3.1. Construction of the K3 surface. Let C be a genus-2 curve over a number field k 
and J its Jacobian. We wish to associate, to an element 6 G SeV^^^k, J), a K3 surface Vs 
with points everywhere locally, such that if 6 is in the image of J{k)/2J{k), then Vg has a 
rational point. 

Definition 3.1. For f{x) G k[x] of degree 6, set Af = k[x]/{f{x)). 

Definition 3.2. For any 5 E A*r, define 

V/,5 = {q E Af : Scf = quadratic mod /}. 

If we write q{x) = X]i=o (^i^\ then q lies in Vf^s if and only if the coefficients of x^, x"^, and 
x^ vanish. Considered as polynomials in the a^, these coefficients 6*3,(74, G^ are homogeneous 
of degree 2. 



Definition 3.3. For S G A*r, define Vs to be the variety in P^ consisting of points (oq : ■ ■ ■ : as) 

sucli tliat ^j^o^*-^* ^ '^f,^- ^^^ sfiows (112], Proposition 2.1.2) tfiat V5 is a smootli complete 
intersection of the three quadrics C3, C4, C5, which makes it a K3 surface of degree 8. 

Let Hf be the kernel of the norm map A*r/{A*f)'^k* — ^ k*/{k*)'^ (which is well-defined be- 
cause the degree of / is even). Then lemma 5.1 of [T7| describes a map A^ : J{k)/2J{k) -^ Hf 
whose kernel has order 1 or 2; as usual, it is induced from the homomorphism Div^j_{C){k) -^ 
A*f defined hj P \-^ x{P) — x, where Div'[(C) consists of divisors whose support is disjoint 
from that of div(y). In addition, the lemma gives necessary and sufficient conditions under 
which the kernel will have order 1. It suffices, for instance, for / to have a factor of odd 
degree. Cf. Theorem 13.2 of [15]; following section 5 of [ITj, we say that "fc satisfies condition 
(I)" (thinking of / as fixed) if the kernel has order 1. 

If k satisfies condition (|), we can identify Se^^-'(A;, J) with the set of elements of Hf whose 
images in Hf ® ky lie in the image of A^,^ for all places v of k\j 

Henceforth, we will assume that k satisfies (|), and we will think of Sel*- '{k,J) as the 
subset of Hf described in the above paragraph. The goal is then to compute that set and to 
look for elements in it which are not in the image of Aj^. 

This is where the set V/_5 comes in: Proposition 3.2.6 of [12] shows that if 5 G Ser'^'{k, J) 
is in the image of A^, then there is a polynomial q G V/^5. For the sake of concreteness, we 
sketch the proof: S will be congruent mod {A*f)'^k* to {x{Pi) — x){x{P2) — x) for some pair 
of points Pi, P2 G C{k) which are defined and conjugate over a quadratic extension of k. We 
restate this fact: 

Proposition 3.4. Let C be a genus-2 curve given by y^ = f{x), f{x) G k[x] of degree 6, 
and let J be its Jacobian. Suppose that k satisfies (l). If 6 E SeV'^'{k, J) is in the image of 
the map J{k)/2J{k) -^ Sel^ -'(A;, J) from (Qj), the K3 surface Vs has a rational point. 

We can view this result from another perspective as well: elements 5 G Sel^^''(/i;, J) cor- 
respond to 2-coverings Xs of J, which are twists of J equipped with a map vr: X — > J 
defined over k which is a twist of multiplication by 2 on Jp Such 2-coverings inherit an 
involution defined over k descending from multiplication by —1 on J . Then the surface Vs 
is the minimal nonsingular model of the quotient of Xs by this involution. (It is a twist of 
the desingularized Kummer surface of J; cf. Chapter 16 of [7].) 

The element 5 comes from J{k)/2J{k) if and only if Xs is the trivial twist of J, which 
happens if and only if Xs{k) is nonempty. But since 6 G Sel'-^^(/c, J), we must have that 
Xs{kjj) is nonempty for all places v of k. Thus Xs is a counterexample to the Hasse principle. 
Certainly if X^ has points in some field, then so does Vs] so Vs has points everywhere locally, 
and Vs{k) = will imply that Xs{k) = and hence that 6 maps to a nontrivial element of 

m{k,j)[2]. 

Remark 3.5. It may be true that Xs{k) is empty while Vs{k) is nonempty; since Xs is really 
the surface in whose rational points we are interested, one might hope to work directly with 
it instead of Vs. Of course, the reason we do not do this is that the usual explicit description 
of Xs is as an intersection of 72 quadrics in P^^ (just as it is for the Jacobian itself-see [7], 
Chapter 2 for the construction). 



In general, this set is known as the "fake 2-Selnier group," but it is isomorphic with the 2-Selnier group 
if k satisfies condition (|)-see [17], section 5. 
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Remark 3.6. If f{x) has a fc-rational root, we can find a model C for C of the form 
w"^ = g{u), deg g = 5. If we carry through the above constructions in Ag instead of Af, we 
get a smooth complete intersection of two quadrics in P^, which is a Del Pezzo surface Wp of 
degree 4, where (3 is the element of Sel^^-'(/c, JacC") corresponding to 6 (see [B] and [S]). We 
will see later that V^ is a double cover of Wj3. Then, just as in the previous remark, it may 
be true that W^i^k) is nonempty while Vs{k) is empty; in fact, this happens for the curve 
given in Theorem 11.11 (assuming that the Brauer-Manin obstruction to the Hasse principle 
is the only one for Del Pezzo surfaces). 

3.2. The 32 lines and Pic V^. Here we review the construction of the 32 lines on PicV^ 
and analyze the structure of Pic V^ as a G^-module. The ideas are taken from |12j, but the 
notation will be different. 

For 6 G A*j-, let ri, . . . , rg be the roots of / in k. Fix a choice of square roots Zi of 6{ri) in 
k. 

For an element s = (si, . . . ,sq) G (Z/2)^, define 7^ to be the unique degree-5 polynomial 

satisfying 7s (r^) = for 1 < i < 6. Now define 

^s = {ls{.x){tx + u): t,u E k} 

and notice that 6{x)q{x)'^ = {tx + uY mod /, for any q{x) G Cg. The projectivization of £« 
is a line Lg on V^. Notice that if s + s' = (1, 1, 1, 1, 1, 1), we have that 7^ = —7s', so Lg = Lgi. 
Thus we have 32 lines Lg indexed by elements of (Z/2)^/((l, 1, 1, 1, 1, 1)). 

It is not hard to determine the intersection pairing as applied to the subgroup generated 
by these lines in Pic V^; one obtains 

-2 if si and S2 differ in or 6 places 
Lg^ ■ Ls2 = ■^ 1 if si and S2 differ in 1 or 5 places 
otherwise 

The first line follows by the adjunction formula for K3 surfaces, and the second and third 
lines by direct calculations. From these intersection numbers we obtain 

Proposition 3.7. /^|12j. Proposition 2.1.21) The classes of the 32 lines on Vs generate a 
subgroup of Pic Vs isomorphic to J}'^ . 

Remark 3.8. In the generic case this subgroup equals all of Pic V^ (Proposition 2.1.30 of 
[12j). As noted above, even if V^ is not generic, we can still use the subgroup generated by 
the classes of the lines to give us an element of H^{k, Pic V^) via restriction. 

4. The algorithm for Vs 

Viewed in terms of Algorithm 12.41 the end of the previous section carries out Step (1) for 
the class of varieties of the form Vs; then F is in our case the set of 32 lines on Vs defined 
earlier. We proceed to carry out the remaining steps of the algorithm. 

Let Gr be the group (Z/2)^/((l, 1, 1, 1, 1, 1)) indexing the 32 lines. Then, by a straightfor- 
ward analysis of the intersection pairing on F (which is Proposition 2.2.11 of [12j), Aut(F) is 
isomorphic to Gr x Sq, where the symmetric group acts on Gr by permuting indices (which 
corresponds to permuting the square roots Zi of 5(rj)), and Gr acts on itself by addition. 
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For 5 G Sev'^'{k, J), the image of Gk -^ Aut(r) must lie in a subgroup of index 2 inside 
Aut(r), because the norm of 6 is required to be a square in k. Indeed, this index-2 subgroup 
is the semi-direct product of 5*6 with the index-2 subgroup of Gr of elements whose sum is 
0. 

This is a group G of order 11520 which acts on Z^'^ in a prescribed way. MAGMA can 
enumerate its subgroups H and compute H^{H,1}'^) for each one. This is Step (2). 

We look in Step (3) for maximal subgroups H such that H^{H, 7}'^') = Z/2 and H^{H', Z^^) = 
for some index-2 subgroup H' C H. MAGMA finds two conjugacy classes of such sub- 
groups. One class consists of subgroups of order 96; the other consists of subgroups of order 
128. Here we exhibit a Brauer-Manin obstruction coming from the first conjugacy class; 
presumably we could use the same techniques to try to find one coming from the second 
class. 

4.1. The subgroup Hg^ and the shape of f{x). Consider polynomials f{x) of the shape 

fix) = f2ix)f3{x){x-rQ) 

where /« is an irreducible polynomial of degree i. Let G be the genus-2 curve y^ = f{x). Pick 
the ordering of the roots of / that lists the two roots of /2, then the three roots of /s, then 
rg. Suppose also that 6 G Sev'^'{k, J) satisfies the condition that S{ri) is a square in Q(ri), 
where ri is a root of f2{x). Then the image of Gk — > Aut(r) will sit inside the subgroup of 
Gr XI Sq generated by the elements 

(0, 0, 1, 0, 0, 1), (0, 0, 1, 1, 1, 1), (12), (345), (34) 

where the first two elements are in Gr and the last three elements are permutations in Sq. 

It is not hard to check that this is a subgroup Hg^ of order 96. If we define H^g to be the 
index-2 subgroup consisting of elements which leave Zq = ^/^(re) unchanged, then MAGMA 
computes that H\HgG,Z^'^) = Z/2 and H^H^s,!'^^) = 0. 

Now let us see where the nontrivial element of H^{HgQ, Z^^) comes from: set 

d = (^(0,0,0,1,1,0) +^(0,0,0,1,1,1)) ~ (^(0,0,1,0,0,0) +^(0,0,1,0,0,1)) ) 

where ig is the divisor class of L^. One computes that ad = d for all d G -^48, and ad = —d 
for all a G HgQ \ H^g. So d is the divisor class we referred to in Step (5) of Algorithm 12.41 

Now the fixed field of the intersection of the image with ^^43 will be L = k{^^/5{rQ)). The 
remaining step in the algorithm is to find a divisor D G Div(V5)L whose divisor class is d. 
Of course we will have to use the fact that Vs has points everywhere locally. The easiest way 
to solve this computational problem, generally speaking, is to reduce it to solving a certain 
norm equation which we are guaranteed has a solution by the Hasse Norm Theorem. We 
now show how this can be accomplished for Vg. 

4.2. The divisor D and the quaternion algebra. The strategy is to take a divisor E in 
the class of d defined over a higher-degree extension of k, and then to subtract the divisor of 
a judiciously chosen rational function to E in order to obtain a divisor defined over L. That 
is, we want 

t{E - (h)) = E-{h) for all r G G^. 

Here we begin with 

E = (-^(0,0,0,1,1,0) + -^^(0,0,0,1, 1,1)) — (-^(0,0,1,0,0,0) + -^^(0,0,1, 0,0,1)) , 
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The stabilizer Hu of the divisor E (not its class) in Hqq is generated by (0, 0, 1, 1, 0, 0) ■ 
(34), (12), (45). It has order 12, and index 4 in H4S. We wish to find a function (h) such 
that E — (h) is fixed by H^g. That is, for all r G -^48, we want E — tE = div(/i/r/i). 

There are four left cosets of if 12 in if 43, and we first identify what the divisor of h/rh 
must be for r in each coset. For ease of notation, we identify an element s G G-p with the 
binary number Yli=i 2^~*Sj. So in this notation 

E = Le + L7-{Ls + Lg). 

So we get 

T e Hi2^ divih/rh) = 

r G (0, 0, 1, 1, 0, 0)iii2 => div{h/Th) = 1^ + L5 + Lq + Lj - (Lg + Lg + Lw + Ln) 

r G (0, 0, 0, 1, 1, 0)iii2 => divih/rh) = Lq + Lj + L^ + L15 - (Lq + Li + Lg + Lg) 

r G (0, 0, 1, 0, 1, 0)iii2 => dw{h/rh) = L2 + L3 + Lg + L7 - (Lg + Lg + L12 + L13) 

Proposition 4.1. Fza; an index set I = ii,i2,H G {1,2,3,4,5,6}. Fix a sequence B = 
(61,62,^3) G ^/2. Lei^ L^/_B ^e t/ie sum of the eight lines Lg, s G Gr, where Sj. = bj. Then 
EjB is a hyperplane section. 

Proof: This is a restatement of Lemma 2.1.24 in [12]. □ 

The point of this proposition is that we can write the above divisors as differences of hy- 
perplane sections. For 3 < z < 6, define Pi to be a linear polynomial cutting out i5{i,2,j}, {0,0,0}! 
and define g^ to be a linear polynomial cutting out i5{i,2,i}, {0,0,1} • Then we see that 

— 

P4 

Le + L7 + Li4 + Li5 - (Lo + Li + Lg + Lg) = div ( — 

(Ps 
— 
P5 

The proof of Hilbert Theorem 90 suggests the following choice of h: 

/^ = l + ^ + ^ + ^. 
Pi Pi Pb 

Subject to some conditions on the Pi and g^, which have so far only been defined up to 
scalar multiples, we will show that this h gives us the rational function we want. Here we 
outline the conditions we will need. 

Condition 1: We require Pi and qi to have coefficients in k{ri, Zi, zq), and to be defined 
so that (0, 0, 1, 1, 1, l)pi = qi. This condition will be immediate from the construction of the 
Pi and qi we will outline below. 

Condition 2: We need that api = Pj and crqi = q^ if a G iige H Sq sends i to j, and so 
that 

{Pi if r G ifge fl Gr has a in the ith spot 
qi if r G ifge fl Gr has a 1 in the ith spot 
This condition is easy to satisfy, as we will shortly see. 
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Condition 3: We also want that piQi = pjQj for 3 < i,j < 5. This condition is more 
difficult to satisfy; we will need to use the fact that Vs has points everywhere locally. 

Proposition 4.2. If pi and qi satisfy Conditions 1,2,3, then the divisor E — {h) is defined 
over the field L = k{^j5{r^)). 

Proof: By condition 1, the rational function h is defined over the field /c(ri, 2:3, 2:4, Z5). Note 
that zq is automatically contained in this field extension because of the requirement that the 
product of the Zi is in k (and the requirement that zi G k{ri)). The Galois group of this 
field extension is a subgroup of iJge- So we must only show that E — tE = div{h/Th) for 
every r G H^s- 

First we show that rh = h for r G Hu- Clearly this is the case for r = (12). Now 

(45)/.= ! + ^ + ^ + ^ = ! + ^ + ^ + ^ = /. 

P5 P5 P4 P5 g5 P4 

and 

((0, 0, 1, 1, 0, 0) ■ m)h = (0, 0, 1, 1, 0, 0) f 1 + ^ + ^ + ^ 

V P3 P3 P5 

93 gs P5 

Pi P5 q5 

So div{h/Th) depends only on the left coset of H12 to which r belongs. In the computations 
that follow, it will help to note that 

, ^ P4P5 + P3P5 + P3P4 + P5q5 
P4P5 

and to notice that the numerator is invariant under permutations of the coordinates 3,4,5, 
by Condition 3. So we are reduced to three computations: 



h P3P5 P3 



(34) /i P4P5 Pi 

h {P4P5 + P3P5 + P3Pa +P5q5) QiQb 



(0, 0, 0, 1, 1, o)/i (g4g5 + psgs + P3q4 + P5q5)piP5 

^ gs (^4^4)^5 + P394P5 + iP4q4)P3 + (P5g5)g4 

P4 {.Pbqb)q4 + iPbqb)p3 + P3q4P5 + (^595)^5 

= — (using Condition 3 several times) 

P4 
h P4P3 P3 



(35) /l P4P5 P5 

In each case h/rh has the divisor we want. D 

Proposition 4.3. In the above situation, we can construct functions pi and qi satisfying 
Conditions 1, 2, 3. 
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Proof: Define 



5 



ri{r2-ri) r^(ri-ri) rKn 



jOi(ao, ai, 02, as, ^4, 05) = 2^ \ V 




. n \ ^2^j ^j2;i 2:12:2 

Define g^ by replacing Zi with —2:4 everywhere. We must now show that the intersection 
divisor of the hyperplane cut out by pj with V^ is in fact -E{i,2,i},{o,o,o}- 

To see this, let q{x) = '^j^qO'jX^, and suppose that q{rm) = — (trm + u) for m = l,2,i. 

Then 

/ N q{ri){r2-ri) , q{r2){ri-ri) q{ri){ri-r2) 
Pi{ao, ai, 02, as, 04, 05) = \ \ 

Z2Zi ZiZi Z\Z2 

((^2 - ri){trx + m) + {vi - ri)(tr2 + m) + (n - r2)(trj + u)) 



Z\Z2Zi 

0. 



Hence the lines whose classes appear in -E{i,2,i}, {0,0,0} all lie on the hyperplane cut out by "Pi. 

Similarly we can show that the intersection divisor of the hyperplane cut out by qi with Vs 
is -E{i,2,i}. {0,0,1}- Now Conditions 1 and 2 are immediate from the construction of p, and g^. 
Note also that "piqi actually has coefficients in k{zf), as it is invariant under the transposition 
of the indices 1, 2 as well as the map Zi 1-^ —Zi. 

Now we must arrange for Condition 3 to hold by multiplying the p's and g's by suitable 

constants. For 3 < z < 6, consider the rational function —^—^ on V. Note that its divisor is 

Peqe 
0, so it is a nonzero constant Ui. To evaluate this constant, let P^ G V{ky) be a point not in 

the support of this rational function, and note that 

_ pi{Py)qi{Pv) _ a^ 
P&{Pv)q&{Pv) K' 
where a„ is a norm from ky{zi) to ky{zf) and hy is a norm from ky{z^) to fc„. 

Lemma 4.4. f|13j, VIII. 1.11) Let k be a field of characteristic 7^ 2. An element c E k* is 
the product of a norm from k{y/a) and a norm from k{yh) if and only if, as an element of 
k{yab), it is a norm from k{^/a^ yh). 

Let Li = k{zf). For any place w of Lj, the expression ui = ay{l/by) exhibits Ui G Li as the 
product of a norm from {Li)w{zi) and a norm from (Lj)^(z6)- By Lemma [4. 4[ we see that Ui 
is a norm from {Li)y;{zi, zq) to {Li)uj{ziZQ). By the Hasse Norm Theorem, it follows that Ui is 
a norm from Lj(zj, Zq) to Li{ziZQ), say of di G Li{zi, Zq). Let a = (0, 0, 1, 1, 1, 1) G Gr- Then 
di{adi) = Ui, and if we let dj be the image of di under an element of Hqq fl 5*6 transposing i 
and j, we see that 

Piqi _ djadi 

Pjqj djadj ' 
and thus if we replace p, by Pi/di and g^ by qi/{adi), we have found functions satisfying 
Condition (3). D 

Once we have constructed h such that E—tE = div(/i/r/i), the rational function g we want 
will be a function whose divisor is {E — {h))+a{E — {h)), where a is any element of ifgg \-ff48. 
The most convenient a to choose is certainly (0, 0, 1, 1, 1, 1) G Gr, because aE = —E. Thus 
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the rational function g we use is a function whose divisor is —{h- (0, 0, 1, 1, 1, l)/i). We can 
drop the negative sign, since we have a quaternion algebra, i.e. {c^g) = (c, l/g)- So we can 
take 

g = h ■ {0,0, 1, 1, 1, l)h times a constant 

where we know that we will be able to find a constant so that g is invariant under the action 
of the Galois group. 

Remark 4.5. It appears at first glance that g will always be a norm from k{zQ) to k, which 
would make the quaternion algebra we have constructed trivial in BtV. But h is not itself 
defined over k{zQ), so indeed this algebra is nontrivial in general. 

Remark 4.6. Here is how we arrange for Condition 3 to hold in practice. We know from 
the proof above that there are constants rfj G k{zi,ZQ) (which are conjugate to each other 
under the action of 5*3 on the indices 3,4,5) such that {pi/di)a{pi/di) is independent of i, 
for 3 < i < 5; here a is the element (0, 0, 1, 1, 1, 1) € Gr sending Zi \-^ —Zi for 3 < i < 6. 

We consider the normal form Ni of piqi with respect to a Grobner basis for the ideal 
generated by the defining equations of V^. The normal form is a uniquely determined repre- 
sentative of the equivalence class of PiQi modulo this ideal; it is clear from the construction 
of the normal form that the normal forms oi PiQi and PjQj are permuted just as PiQi and PjQj 
are, by the action of S3 on the indices. Fixing a monomial appearing in Ni and calling its 
coefficient q, we note that Ci G k{zi) should satisfy 

Q _ Piqi_ _ N^jdj) 
Cj PjQj N^idj) 

Note also that 

Ci 

is independent of i, but since this quantity is in k{zf, zq)* for each i, it follows that it lies in 

k{z,y. 

So we search for n G k^z^)* such that CiU is a norm from k{zi,ZQ) to k{zf,ZiZQ); we 
are guaranteed that such n exist, and in practice we find them quickly (e.g. using the 
NormEquation function in MAGMA). 

In fact, in every explicit example the author has written down, he has been able to find 
n E k*; but the author does not know if it is always possible to find n E k* in general. 

5. Proof of the main theorem 

Theorem 5.1. Let C he the hyperelliptic curve y^ = (x^ — 5x + l)(x^ — 7x + 10)(x + 1). 
Then UI{Q, Jac{C))[2] = Z/2 x Z/2. 

Proof: Let J = Jac(C). Let f{x) be the sextic polynomial defining C. First note that 
it is easy to show that J(Q)/2J(Q) is a vector space over Z/2 of dimension at least 2; 
J(Q)[2] = Z/2 because there is a quadratic factor of f{x), and there is also the image of a 
point in J(Q) coming from the point (—1,0) G C(Q). According to StoU's algorithm from 
[T7] . now implemented in MAGMA as TwoSelmerGroup, we can compute SeL^'*(Q, J), and 
find that it is a vector space over Z/2 of dimension equal to 4. Moreover, since C has a 
rational point, its Jacobian is even (in the language of [H]); that is, the order of III(Q, J) [2] 
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is a square. Hence it is either 1 or 4. We must therefore only exhibit one nontrivial element 
of III(Q, J) [2] to complete the proof. 
Define 6 e A*j: by 

7 

(4) 6(x) = (377x^ - 706x^ - 5200x^ + 2061x2 - 9086x - 12308) 

2965 

Then MAGMA shows that 5 gives an element of Sel^ (J)- The K3 surface Vs is given by 
the vanishing of the polynomials 

- 377ao - 1604aoai - 4310aoa2 - 9600aoa3 - 14130aoa4 - 24100aoa5 - 2155al - 9600aia2 

- 14130aia3 - 24100aia4 + 3002aia5 - 7065a^ - 241000203 + 30020204 - 3752o205 
+ 1501o^ - 375203O4 + 38O25403O5 + 1901270^ + 50535604O5 + 2697585o^, 

353ao + 1053ooOi + 3820oo02 + 12135oo03 + I62IO00O4 + 49701oo05 + 19100^ + 12135oia2 
+ I62IO01O3 + 497OI01O4 - 788O01O5 + 8105o^ + 497OI02O3 - 788O02O4 + I9763I02O5 

- 3940o^ + I9763I03O4 - 50783O03O5 - 253915o^ + I68687304O5 - 2233480o^, 

1300og + 6321ooOi + 17920oo02 + 34505oo03 + 63708oo04 + 62335oo05 + 8960o? + 34505oiO2 
+ 637O801O3 + 62335oi04 + 9056O01O5 + 31854o^ + 62335o203 + 9056O02O4 - 243597o205 
+ 45280o^ - 24359703O4 - 20226203O5 - 1011310^ - 3623209o4O5 - 1919025o^. 

Since ^(rg) = —7, we will be using the Azumaya algebra {—7,g), where g is constructed 
as in the previous section. Note that the denominator of g, which is a constant multiple of 
h-{0, 0, 1, 1, 1, l)h, is PiP^qAq^. This is a constant multiple of (pe'Je)^- Plugging in any point in 
V{k^) to (pe'Je)^ yields a norm from k^^ZQ) to k^, so when we compute the invariant of g, we 
can ignore the contribution coming from its denominator. The numerator is a homogeneous 
polynomial F of degree 4, so we are reduced now to computing the expressions (—7, F(Pj,))j, 
for all places f of Q and all points P„ e V{ky). (These expressions are invariant under 
projective scaling of the coordinates of Py, since F has even degree.) 

We wish to compute the primes of bad reduction for Vs next, for the purposes of invariant 
computations. This is a standard computation using the minors of the matrix of partial 
derivatives; we can also note that the only bad primes should be primes dividing the dis- 
criminant of the minimal Galois extension over which all the lines are defined. In our case the 
bad primes are 2, 3, 7, 83, 739, 00. Note that if —7 is a square in Qp we know automatically 
that the quaternion algebra (—7, F/G) will have constant invariant at p. So we do not 
have to analyze p = 2, 739. 

These will not be the only primes to consider when we compute the possibilities for 
inVp^(Pp), Pp G Vs{Qp). Here we repeat a standard lemma that allows us to restrict our 
consideration to a finite set of primes. 

Lemma 5.2. Let V be a smooth projective geometrically integral k-variety, k a number field, 
g G k{Vy , and let {L/k,g) be a quaternion algebra in BrV^. Let v be a nonarchimedian place 
of k and suppose that v does not ramify in L and that V has smooth reduction at v. Then 
myy{L/k,g){Py) is independent of the choice of P^ G V{kv). 

Proof: See Lemma 8.4, [9]. D 
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So if p is not a bad prime for Vs and p does not ramify in k{zQ), then the invariants of the 
quaternion algebra {S{rQ),g){Pp) will be independent of the choice of Pp. When will it be 
nonzero? 

The proof of Lemma 8.4 of [9] implies that, if S{rQ) is not a square mod p, the invariant 
of {S{rQ),g){Pp) will equal mp/2 G |Z/Z, where nip is the integer such that rripVp appears in 
the divisor of g (here Vp denotes the special fiber of the smooth model V of V5 over Spec Zp). 

Pick a point P G V5(Q). Write g = F/G, where F and G are as above; they are homoge- 
neous polynomials in six variables with integer coefficients. Since G is a norm from k{zQ){Vs) 
to k{Vs), we can ignore it for the purposes of invariant computations. If there is a prime 
p over p not dividing F{P), then Pp G Vp{¥p) is not in the support of g (or some rational 
function obtained from g by multiplying the denominator by a norm from k{zQ){Vs)), so the 
integer m must equal 0. So the set of primes at which iiaVp{6{rQ), g){Pp) is not always 0, 
independent of Pp G Vs{Qp), is contained in the union of the set of bad primes with the set 
of primes of Z dividing N{F{P)), where N denotes the absolute norm down to Q. 

This is true for all P, so after combining results for various P we obtain the set 

{5, 61, 347, 739, 3433, 4337, 6833, 663149189, 69804594311} 

of primes p at which Vs has smooth reduction but the integer nip is possibly nonzero. After 
throwing out the primes for which —7 is a square in Q* we get 

{5,61,3433,663149189}. 

For each p in this set we find that rup is odd. This is not hard to check: as the invariant is 
constant, we need only lift one point not in the support of F/G in Vs{Qp) to high enough 
precision in order to evaluate F at it. Since the invariant at each of these primes is 1/2, we 
obtain 

5^inv,(-7,F/G)(P,) =inv3(-7,F/G)(P3) + mv7(-7,F/G)(P7) +mv83(-7,F/G)(P83) 

V 

+ inVoo(-7,P/G)(Poo). 

To carry out the invariant computation at 00, we first show that the value of the function 
F on the points in V5(]R) is either always positive or always negative. To see this, consider the 
polynomial whose roots are ±^3, ±^4, ±^5; this polynomial can be written as /i(x^), where 
h{x) = x^ — 126a;^ + 7938x + 250047. Notice that h{x) has one real root, which is negative. 
Under any embedding of the splitting field of /i(a;^) into C such that the image of z^ is 
the negative real root, the images of zf and z"^ are distinct and conjugate. Choose such an 
embedding so that 2:4 and —z^ are complex conjugates. Then consider the action of complex 
conjugation on the pi and g^; we see that it sends ps to q^ and vice versa, while it sends p4 
to gs and p^ to ^4. 

Now P is a constant multiple of 

(psPs + P3P4 + P4P5 + psQs) (gags + qsQA. + qiQb + p-m), 

and if we plug in a point in Vs(M.) to both these factors, we see immediately that we get the 
product of a complex number and its conjugate. So if we can show that F is never zero on 
V5(R), we can deduce that it is either always positive or always negative. It can be easily 
verified-either by plugging in a specific real-valued point or noticing that F is actually a 
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positive constant multiple of the above function-that F is always positive. This shows that 
the invariant is actually zero. 

To see that F never vanishes on V5(M), note that if F{P) = 0, then both factors of F 
vanish at P. So P lies on the intersection of the K3 surface Vs with the two hyperplanes cut 
out by the factors of F; this intersection is zero-dimensional, and MAGMA computes that 
there are no real points on it. 

At 83 we note that there is one singular Fgs-valued point in the special fiber Vga, but it 
does not lift to any points mod 83^. By a theorem of Bright ([4J, Theorem 1), the invariant 
is constant above any smooth Fgs-point, so we need merely write down all points in ^^(Fgs), 
and lift each one to high enough precision in order to evaluate F/G at it. (Hensel's lemma 
guarantees that any lift of a smooth Fga-point will lift to a Zga-point.) Doing this computation 
for each of the 6960 smooth points in V5(Fg3), we find that each point has a lift P mod 83^ 
such that the 83-adic valuation of F{P) is either 2 or 4. The invariant at P is or 1/2 
depending on whether or not F{P) has even or odd valuation, respectively; so in all cases, 
we find that the invariant at 83 is zero. 

At 7, we compute that V(¥j) has 71 points. One of these points, P^ = (3: 6: 3: 1: 2: 1), 
is singular, and the set 

{Pe ViWj): P(P) = 0} 

has 15 elements (including the singular point). For the other 56 points, we find that P(P) = 
1, 2, or 4, which are the squares in F^, so the invariant is zero at all these points. 

Again using Theorem 1 of |1] , we find one lift P of each of the 14 remaining nonsingular 
points in V(¥j) to a point in V{7ji) (at least one of whose coordinates is a unit-we will 
call such P normalized) and compute F[P) for each such lift. In particular, we see that 
F[P) = 7^, 2 ■ 7^, or 4 ■ 7^ mod 7'^ for each of these points, so F{P) is a square in Z7, so the 
invariant is zero at these points as well. 

Above the point Pg, Bright's theorem does not apply, and we must actually consider all 
possible lifts of P^ to P G ^(Zy). A lengthy MAGMA computation shows that for any such 
normalized P, F{P) = 2-7^ mod 7^, so once again the invariant is zero at all these points, 
and hence the invariant is zero at all points in V{Qj). 

At 3, we compute that V^(F7) has 40 points. All of them are singular, so Bright's theorem 
does not apply. A MAGMA computation similar to the one at 7 shows that if P is any 
normalized point in ^(Zs), f3(P(P)) = 5. So the invariant is 1/2 at all points in ^^(Qs). 

Hence the sum ^inVy^(P^) is constant and equal to 1/2 for all (P^) G ^^(Aq), so 
Vs{Aq)^' = 0, so Vs{Q) = 0. So (5 G SeP\Q, J) maps to a nonzero element of m(Q, J) [2]. 
D 

Proposition 5.3. Let n be a (positive) product of primes splitting completely in the field 

L(V2,v/^739), 

where L is the field of definition of the 32 lines, the degree-96 splitting field of {x^ — 35x + 
49) (a;^ — 126x^ + 7938a;^ + 250047). Then the Jacobian Jn of the curve given by 

y2 = ^(a;2 _ 53, _^ x)(a;^ - 7x + 10)(x + 1) 
satisfies m(Q, J„)[2] ^0. 
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Proof: Let f{x) = (x^ - 5x + l){x^ -7x + 10)(x + 1). Note that Aj = Anj. We show that 

the element 

7 

-(377x^ - 706x^ - 5200x^ + 2061x2 - 9086x - 12308) 



2965 

hes in Sel*- -"(Q, J„). By Corollary 5.11 of [17J, we must check this only at oo, 2, and primes 
p such that p2 divides the discriminant of n/(x). So we must check oo, 2, 7, 739, and primes 
dividing n. At primes p dividing n, we actually show that the image of 6 lies in (A* r)2Q*. 
Let ri and r2 be the roots of x^ — 5x + 1, let r3,r4,r5 be roots of x^ — 7x + 10, and let 
re = —1. Consider the isomorphism 



Anf- 

given by g{x) i— > {g{ri), g{r3),g{rQ)). The image of 6 under this isomorphism is 

{6{n),6{r,),6{-l)) = {zlzl-7). 

For primes p splitting completely in L, these three elements zf, z|, and —7 are actually in 
{QpY- So in fact the image of g{x) lies in ((A„j ® Qp)*)^, so it is zero in Hf ® Qp; hence it 
is trivially in the image of Aq . 

At the primes p = oo,2, 7, 739, we notice that n is a square in Q*; so the fact that S 
lies in AQ^{JniQp)/2JniQp)) follows from the fact that it lies in Aq^(Ji(Qp)/2Ji(Qp)). This 
completes the proof. D 

6. Connections with Del Pezzo surfaces of degree 4 

In this section, we consider the odd-degree model C of C obtained by sending the rational 
point (—1,0) to infinity. Its equation is 

w^ = (7^2 -7u + 1)(16m^ - W -3u+ 1), 

via the change of variables w = y/{x + 1)^, u = l/(x + l). Here we prove a general lemma 
about the relationship between these two curves. 

Lemma 6.1. Consider a hyperelliptic curve Ci over a number field k with equation 

y^ = f5ix){x-a). 

Let 6*2 be the odd- degree model of this curve, given by the equation 

w^ = mVs f - + a 

where w = y/{x — a)^, u = l/(x — a). Let /(x) be the sextic polynomial defining Ci 
and g{u) the quintic polynomial defining C2. Let 5 E Sel^ '{k, JacCi), considered as in 
[T7] as a subgroup of A*f/{A*fyk* , and let (3 be an element in Sel^ -*(/;;, JacC2), considered 
as in [17] as a subgroup of A*/{A*Y. There is a natural isomorphism Sel' -*(/;;, JacCi) -^ 

Sel*- ^(fc, JacC2); suppose it sends 5 to (3. Let Wp be the intersection of two quadrics obtained 
as the projectivization of the set 

Wg^p = {s{u) G Ag-. P{u)s{uY = quadratic (mod g)} 
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(cf. [6] and \5\). Then the K3 surface Vs obtained from Ci is a double cover ofWp, which is 
a smooth Del Pezzo surface of degree 4. It ramifies over the projectivization of 

{s{u) G Ag-. [3{u)s{uY = linear (mod g)}. 

Proof: Note that k[x]/{f!^{x)) = k[u]/{g{u)). Now there is a natural isomorphism between 
Ay{A*j^)'^Q* and Ag/(A*)^, as the first group is isomorphic to 

{k[x]/f,{x)y(Bk* 
squares ■ k* 
and the second group is isomorphic to 

{k[u]/{giuW 



squares 

It is not hard to see that this isomorphism restricts to an isomorphism : Sel*- -* {k, Jac Ci) -^ 
Se^^^(/c, JacC2) (where these Selmer groups are reahzed, as in [T7], as subgroups of y4j/(y4j)^A;* 
and Ag/{A*y, respectively). 

The fact that Wj3 is a smooth Del Pezzo surface of degree 4 is Lemma 17 of [5]. Now 
suppose q G V/,5, so that Sq"^ is congruent to a quadratic polynomial c mod /. Let Ci(-u) = 
u'^c{l/u + a)/6{a); then Ci is also quadratic. If /? = (p{S), then 

(3{u) = m^5(1/m + a)/6{a) mod (A^^ 

and if we choose this representative polynomial for the class of (3, we see that the polynomial 
s{u) defined by the formula 

(5) s{u) = u~'^q{l/u + a) raod g{u) 

is in Wg,/3, because P{u)s{uY = ci{u) (mod g{u)). Note that s{u) is well-defined because u 
is invertible mod g{u). 

So (jSD gives a map Vj^s —^ ^g,f3j which induces a map Vs -^ Wp. Now consider s{u) G Wg,/3, 
and suppose that /5s^ = Ci mod g. Let ri, . . . , rg be the roots of / in A;, where rg = a. Now 
q G V/,5 maps to s if and only if 

?(n) = 7 r^s I ) , 1 < 2 < 5. 

(rj-a)^ \ri-aj 

Note that the quadratic polynomial associated to q is c{x) = 6{a){x — a)^ci(l/(a; — a)). So 
if g is to lie in V/,5, we must have that q'(a)^ is the leading term of Ci. Generically there are 
two choices for the square root of this leading term (these choices coincide when the leading 
term is 0). The result follows. D 

As mentioned above, the lemma implies that if Wjs has a Brauer-Manin obstruction to 
rational points, then so does Vs, and if Wf^ fails the Hasse principle, then so does Vs. So 
the "K3 method" of exhibiting explicit elements of III [2] given above can be viewed as a 
generalization of the "Del Pezzo method" of [6] and [5j. (Of course, the K3 method also 
works more generally; it applies to any genus-2 curve y"^ = f{x), while the Del Pezzo method 
works only for curves with odd-degree models. The example given in [12] is an example of 
an application of the K3 method to a curve without an odd-degree model.) 

For the curve y"^ = (x^ — 5x + l)(x^ — 7x + 10) (x + 1) and specific choice of S given in 
(jl]), this construction produces a Del Pezzo surface Wp with points everywhere locally. As 
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it happens, however, Logan's program for Del Pezzo surfaces ([H]) shows that Wf3 has no 
Brauer-Manin obstruction to rational points. We expect that it satisfies the Hasse principle 
as well (although the size of the coefficients in the defining equations for Wjs precludes a 
successful search for rational points of small naive height). In any case, this shows that the 
K3 method does in fact give a generalization of the Del Pezzo method even in the case when 
both methods apply. 
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